This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/hyElpaRCi-O3ttxNPiq_tbabKaM.roa File: hyElpaRCi-O3ttxNPiq_tbabKaM.roa (raw, json) Hash identifier: utFwv7iVQh6KFUfFUAR5z2o9lvR/OP856LSn2YX8Pbs= Subject key identifier: 87:21:25:A5:A4:42:8B:E3:B7:B6:DC:4D:3E:2A:BF:B5:B6:9B:29:A3 Certificate issuer: /CN=d777943b341188e9cd2e93de288b33ffe041c7d2 Certificate serial: 019B7910C08D957EAE24F2E5046B9BEF7D93 Authority key identifier: D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2 Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/hyElpaRCi-O3ttxNPiq_tbabKaM.roa Signing time: Thu 01 Jan 2026 10:18:19 +0000 ROA not before: Thu 01 Jan 2026 10:18:19 +0000 ROA not after: Thu 01 Jul 2027 00:00:00 +0000 asID: 201077 IP address blocks: 185.86.196.0/22 maxlen: 24 2a05:bb40::/29 maxlen: 30 Validation: OK Signature path: rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.mft rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer Signature path expires: Tue 10 Feb 2026 10:00:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 01:9b:79:10:c0:8d:95:7e:ae:24:f2:e5:04:6b:9b:ef:7d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=d777943b341188e9cd2e93de288b33ffe041c7d2 Validity Not Before: Jan 1 10:18:19 2026 GMT Not After : Jul 1 00:00:00 2027 GMT Subject: CN=872125a5a4428be3b7b6dc4d3e2abfb5b69b29a3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:0c:5f:26:77:b7:d0:e4:31:ae:c4:25:93:2e: 02:91:ab:0a:04:ee:18:40:b8:ca:11:b4:55:9c:cb: 86:93:2e:66:13:63:be:df:c1:bf:04:cf:5a:5d:15: f8:c9:8f:68:fe:e7:0f:6c:7d:fd:74:b6:56:3c:0f: c3:39:5f:0a:57:1f:dd:5d:f1:b3:84:32:69:54:69: 7d:22:ae:c4:cc:73:34:a9:5d:1c:64:88:aa:48:e0: 05:8b:cf:1f:17:11:e7:9f:a9:c4:58:c2:51:77:d3: c7:ef:01:ce:77:ab:25:a3:34:e3:c2:0c:ab:12:b8: d8:59:d0:5b:3c:07:9a:46:69:23:a1:24:44:e6:88: 3a:6f:37:81:ca:e7:d9:81:ed:c5:38:e0:8b:3e:7b: 7a:b5:38:64:c4:18:fa:8d:ae:a0:37:45:3b:da:53: ff:46:38:34:6a:f8:6e:b1:d3:40:7d:fb:95:11:2a: 12:d7:69:be:f5:db:d3:20:a5:ba:3a:d5:95:51:89: fb:0f:9d:b2:54:2f:5d:04:b2:13:ba:3e:01:57:e7: 4b:5c:90:30:8f:b7:47:4b:5d:4b:bc:27:5a:f2:fd: d0:27:18:4d:6f:21:d6:86:04:39:6f:ec:d3:53:24: 39:ab:52:10:4c:70:07:85:39:a6:35:1b:35:75:7b: 94:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 87:21:25:A5:A4:42:8B:E3:B7:B6:DC:4D:3E:2A:BF:B5:B6:9B:29:A3 X509v3 Authority Key Identifier: keyid:D7:77:94:3B:34:11:88:E9:CD:2E:93:DE:28:8B:33:FF:E0:41:C7:D2 X509v3 Key Usage: critical Digital Signature Authority Information Access: CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/13eUOzQRiOnNLpPeKIsz_-BBx9I.cer Subject Information Access: Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/hyElpaRCi-O3ttxNPiq_tbabKaM.roa X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.ripe.net/repository/DEFAULT/49/35b1df-78cf-4818-b33a-cda7fc7eb092/1/13eUOzQRiOnNLpPeKIsz_-BBx9I.crl X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 185.86.196.0/22 IPv6: 2a05:bb40::/29 Signature Algorithm: sha256WithRSAEncryption 4d:83:e3:73:e8:93:2c:1e:47:6a:fe:ae:32:c4:b3:a7:83:36: 0a:1e:dd:44:7e:40:d7:ef:05:6a:07:95:5f:ad:d3:f1:ca:89: b5:d2:26:1d:6e:ca:3b:7b:90:6e:41:8d:ca:05:ac:b7:ae:a0: 8c:0b:1d:96:b2:98:0d:53:29:c3:45:71:67:b5:0c:c3:6e:f9: 31:88:2f:64:ac:4b:02:34:fb:f8:c0:6b:5d:27:b3:7f:cf:d0: 54:c6:26:d8:8c:67:d5:56:bb:0b:76:62:23:09:c0:52:c4:87: ab:63:49:c2:b6:a2:e2:10:de:05:db:e4:b2:70:e1:c4:8f:43: 3f:65:2a:33:9f:80:ce:fa:c2:55:65:e2:a2:2c:a7:59:87:a4: 7d:25:6c:01:03:c1:68:95:88:58:39:5a:1c:4f:c0:77:04:41: 2d:48:1d:45:8b:3f:26:64:6d:06:c7:96:69:90:b4:f2:ef:98: 28:3e:8f:d3:22:92:f3:93:59:ea:0f:d8:c6:16:b5:f0:81:a8: 49:0a:d4:d9:46:d9:77:83:91:18:0e:9d:07:2b:c2:cc:eb:c0: 36:01:bc:bf:2b:5e:95:15:d1:9c:c7:8a:6f:7f:2b:ed:1d:3a: 6c:a2:4a:d4:e8:58:77:d7:31:02:6c:0b:af:56:e5:25:c5:50: 35:c5:dc:88 -----BEGIN CERTIFICATE----- MIIFDDCCA/SgAwIBAgISAZt5EMCNlX6uJPLlBGub732TMA0GCSqGSIb3DQEBCwUA MDMxMTAvBgNVBAMTKGQ3Nzc5NDNiMzQxMTg4ZTljZDJlOTNkZTI4OGIzM2ZmZTA0 MWM3ZDIwHhcNMjYwMTAxMTAxODE5WhcNMjcwNzAxMDAwMDAwWjAzMTEwLwYDVQQD Eyg4NzIxMjVhNWE0NDI4YmUzYjdiNmRjNGQzZTJhYmZiNWI2OWIyOWEzMIIBIjAN BgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKCAQEAtgxfJne30OQxrsQlky4CkasKBO4Y QLjKEbRVnMuGky5mE2O+38G/BM9aXRX4yY9o/ucPbH39dLZWPA/DOV8KVx/dXfGz hDJpVGl9Iq7EzHM0qV0cZIiqSOAFi88fFxHnn6nEWMJRd9PH7wHOd6slozTjwgyr ErjYWdBbPAeaRmkjoSRE5og6bzeByufZge3FOOCLPnt6tThkxBj6ja6gN0U72lP/ Rjg0avhusdNAffuVESoS12m+9dvTIKW6OtWVUYn7D52yVC9dBLITuj4BV+dLXJAw j7dHS11LvCda8v3QJxhNbyHWhgQ5b+zTUyQ5q1IQTHAHhTmmNRs1dXuUewIDAQAB o4ICGDCCAhQwHQYDVR0OBBYEFIchJaWkQovjt7bcTT4qv7W2mymjMB8GA1UdIwQY MBaAFNd3lDs0EYjpzS6T3iiLM//gQcfSMA4GA1UdDwEB/wQEAwIHgDBkBggrBgEF BQcBAQRYMFYwVAYIKwYBBQUHMAKGSHJzeW5jOi8vcnBraS5yaXBlLm5ldC9yZXBv c2l0b3J5L0RFRkFVTFQvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLmNlcjCB jQYIKwYBBQUHAQsEgYAwfjB8BggrBgEFBQcwC4ZwcnN5bmM6Ly9ycGtpLnJpcGUu bmV0L3JlcG9zaXRvcnkvREVGQVVMVC80OS8zNWIxZGYtNzhjZi00ODE4LWIzM2Et Y2RhN2ZjN2ViMDkyLzEvaHlFbHBhUkNpLU8zdHR4TlBpcV90YmFiS2FNLnJvYTCB gQYDVR0fBHoweDB2oHSgcoZwcnN5bmM6Ly9ycGtpLnJpcGUubmV0L3JlcG9zaXRv cnkvREVGQVVMVC80OS8zNWIxZGYtNzhjZi00ODE4LWIzM2EtY2RhN2ZjN2ViMDky LzEvMTNlVU96UVJpT25OTHBQZUtJc3pfLUJCeDlJLmNybDAYBgNVHSABAf8EDjAM MAoGCCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuVbEMA0E AgACMAcDBQMqBbtAMA0GCSqGSIb3DQEBCwUAA4IBAQBNg+Nz6JMsHkdq/q4yxLOn gzYKHt1EfkDX7wVqB5VfrdPxyom10iYdbso7e5BuQY3KBay3rqCMCx2WspgNUynD RXFntQzDbvkxiC9krEsCNPv4wGtdJ7N/z9BUxibYjGfVVrsLdmIjCcBSxIerY0nC tqLiEN4F2+SycOHEj0M/ZSozn4DO+sJVZeKiLKdZh6R9JWwBA8FolYhYOVocT8B3 BEEtSB1Fiz8mZG0Gx5ZpkLTy75goPo/TIpLzk1nqD9jGFrXwgahJCtTZRtl3g5EY Dp0HK8LM68A2Aby/K16VFdGcx4pvfyvtHTpsokrU6Fh31zECbAuvVuUlxVA1xdyI -----END CERTIFICATE-----Generated at Mon Feb 9 18:42:26 2026 by rpki-client